{"uuid": "cc54ac9e-3c51-472d-8bde-d18ee3a1f4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.634061Z"}